AI Presentation Maker
PassAudited by VirusTotal on May 12, 2026.
Findings (1)
The OpenClaw AgentSkills skill 'ai-presentation-maker' is classified as benign. The `SKILL.md` explicitly instructs the AI agent to route all file operations through `assets/presentation-helper.sh` and to never construct raw shell commands with user input, confining all operations to `~/workspace/presentations/`. The `presentation-helper.sh` script implements robust security measures, including `sanitize_string()` to remove shell metacharacters, `sanitize_filename()` to strictly whitelist characters for file names, and `validate_path()` using `realpath -m` to prevent path traversal. All file operations and external script calls are performed with sanitized inputs, demonstrating a strong commitment to security and preventing common vulnerabilities like shell injection. There is no evidence of intentional malicious behavior such as data exfiltration, unauthorized remote control, or persistence mechanisms.
